Questions tagged [john-the-ripper]
John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus lots of other hashes and ciphers in the community-enhanced version ("jumbo"). [openwall.com]
122
questions
2
votes
1
answer
8k
views
John The Ripper Error: No password hashes loaded when cracking a zip file in kali linux
I was practicing bruteforce attacks using John The Ripper. I want to crack a zip file. I obtained the hash and stored it in a zip file but when I attempt to crack the zip file it is giving me an error ...
1
vote
0
answers
1k
views
John the ripper - "no password hashes loaded " for pdf
I'm trying to decrypt a pdf that I no longer have the password for. When I use JohnTheRipper, it can't seem to load any password hashes.
Basically, this is what I run.
└─$ perl pdf2john.pl /home/...
- 11
0
votes
0
answers
243
views
Rar (Zip) Decryption, how does it work
I was wondering how rar decryption works.
I know that when I enter a password to encrypt my rar file, my password is derived into a key that is used to encrypt the rar file.
But how does the ...
0
votes
1
answer
1k
views
How does john the ripper crack ssh private key passphrases?
How does John The Ripper work when trying to crack passphrase of a private ssh key? What steps are involved when it tries to do so? What's the role of ssh2john in the whole process?
1
vote
2
answers
2k
views
What is the plaintext password of 'hash part 1' in the shadow file?
In Immersive Labs lab "Password Hashes II"
What is the plaintext password of 'hash part 1' in the shadow file?
shadow.txt contains:
part1:$6$WJ9Y7LHr$S3SdnPsXhCzHetPz0CL6TL7gZdeVK/...
- 21
0
votes
0
answers
857
views
cracking HMAC-SHA1 when the password and seed are inverted
I happen to have a few hashes generated with code that did this (it has been changed to use a more "standard" bcrypt call):
$ python3
>>> import hmac
>>> hmac.new(b'The ...
- 125
2
votes
1
answer
4k
views
Unable to get John the Ripper to crack PDF password
I am new to Kali Linux and JTR but am playing around trying to crack a PDF file. I set the PDF Password to test so it's a known password on my own file. For whatever reason JTR appears to finish ...
- 121
1
vote
1
answer
831
views
How to apply custom filters for John The Ripper when cracking RAR3 archive password?
My problem is that I'm trying to crack RAR file with is encrypted with RAR3 encryption.
Decided to try with John The Ripper.
Here are clues I have from my friend.
Max password length is 8
Only ...
- 113
2
votes
1
answer
8k
views
Decrypting a password-protected 7z file with Delta filter fails
I have made a 7z archive using Delta filter containing a wav file and I have protected it with a password. I am running a terminal in Kali Linux. My problem is that I cannot get the password cracked ...
- 21
9
votes
1
answer
81k
views
Use John the Ripper to break Password Protected Zip
I installed kali linux, that comes with John the ripper. I have a password-protected zip file. I'm pretty sure the password is complex. I first convert the zip into a hash:
sudo zip2john FILE_LOCATION ...
- 91
1
vote
1
answer
6k
views
John The Ripper and PBKDF2-HMAC-SHA1
I am trying to hash a list of passwords with PBKDF2-HMAC-SHA1 and then crack them using John. However, John does not recognise the hashes and I get a No Hashes Found error. It works with SHA256, but I ...
- 13
3
votes
1
answer
8k
views
John The Ripper - find password when you know a part of it
I left my old job a few years back and wanted to check a few of my old pdf payslips but for the life of me I can't remember the password.
I've tried using John The Ripper in incremental mode because I ...
- 133
0
votes
0
answers
2k
views
Getting an error when running John The Ripper on 7zip file
I've never really worked with this tool, John Jumbo 1.9. I'm just curious since people say 7zip is a secure way of encrypting files, so I wanted to try it myself. Anyways, I encrypted a file with 7z, ...
- 101
0
votes
0
answers
21
views
Is it possible to have and use a dynamic dictionary for brute-forcing? [duplicate]
For some reason - totally useless for the question - I have this PDF file with a password I forgot and I have no way to remember. I know for a fact (the person who created and gave me this PDF told me ...
- 1
4
votes
1
answer
31k
views
"john --format=md5" caused "Unknown ciphertext format name requested" error
This is known md5 hash for Kioptrix: Level 1.1 (#2)
Linux unshadow file
wolf@linux:~$ cat md5hash.txt
root:$1$FTpMLT88$VdzDQTTcksukSKMLRSVlc.:0:0:root:/root:/bin/bash
john:$1$wk7kHI5I$...
- 367
0
votes
1
answer
432
views
Very beginner question about JtR
I Have lost my zip file password and I tried to recover it with Windows 10, using John the Ripper 1.9.0 Jumbo.
Things I know from this password:
9 to 11 characters
Alphabetics A B E F and a b e f (...
- 1
1
vote
1
answer
381
views
John the Ripper / Hashcat rule, reject candidate if char at position X is the same as character at position Y
I'm using John to generate some word lists and I'm trying to figure out the most optimized way to do the next step. What I want to do is add ever possible 3 digit number to a set where the first digit ...
- 224
2
votes
1
answer
3k
views
Crack windows excel password
I have many password protected microsoft excel worksheet and I need to be able to edit it. I have forgotten the password, and I know that I can edit the file and take out the password check, but I ...
- 21
0
votes
0
answers
54
views
John the Ripper [duplicate]
I've already cracked a PDF with pdf2john but it doesn't show the password. What could be the problem? (The password isn't blank.)
0
votes
1
answer
1k
views
JtR Password hash not recognized
I am attempting to encrypt some passwords by hand to use in a project with JtR. Unfortunately, the program is having difficulty recognizing the hash types of the passwords after hashing them.
...
- 11
0
votes
0
answers
665
views
john ripper and option --mask
I have a text file parole.txt containing the dictionary to be passed to john with the --wordlist option.
Here is an extract of the file
mamma
papa
libro
...
...
if I use the --mask=?u?w?d option I ...
- 1
1
vote
1
answer
972
views
John the ripper - ecryptfs - sample not cracked: 0 password hashes cracked
I tried to use john the ripper on the sample :
ecryptfs_sample_metadata.tar (password is 'openwall')
Which I downloaded from here:
https://openwall.info/wiki/john/sample-non-hashes
If i try
sudo ...
- 11
1
vote
0
answers
2k
views
John the Ripper doesn't crack passwords when I use wordlists [duplicate]
Title says it all, I can't tell if John is just crashing or "gives up" on cracking the hash. First I start off by creating an md5 hash out of a word I KNOW is on the rockyou.txt wordlist:
echo -n '...
- 11
2
votes
2
answers
2k
views
dictionary attack hashing algorithm
Does the kind of algorithm used to hash passwords have any advantages or disadvantages in a dictionary attack? i.e. SHA256, MD5, etc. or is it just the dictionary that is used by the attacker matters? ...
- 21
0
votes
1
answer
1k
views
Cracking less than 4 letter linux password using john
I am trying to crack a less than 4 character Linux password using john. I unshadowed my password into file.txt I use the following command:
john -incremental file.txt
the output is:
0g 0:00:00:04 ...
- 17
0
votes
0
answers
215
views
Issue using John The Ripper
First things first, I'm a newbie so, bear with me...
I created a word list with a combination of a possible password for a certain user using Crunch (it's the dictionary output) and need to use John ...
user226855
0
votes
0
answers
4k
views
Unable to start hashcat in mode 13600 WinZip : Separator Unmatched
I have a zip file containing a JPEG image of size 3.5 MB, encrypted with AES-256. I used WinZip for the creation of the zip file. In order to create the hash of the zip file, I used John The Ripper's ...
- 101
5
votes
4
answers
44k
views
How do I crack an id_rsa encrypted private key with john the ripper?
I am trying to crack a password protected id_rsa, with john the ripper. But it doesn't find the correct password for some reason.
I have create a new user and generated a new id_rsa with ssh-keygen (...
- 161
1
vote
1
answer
3k
views
John the Ripper Custom Dynamic Hash Function Usage
I have created a custom dynamic hash function comprised of a series of different existing hash functions chained together. I'll spare you the exact details because it's for a class assignment.
I've ...
- 11
0
votes
1
answer
12k
views
John the ripper(kali linux) cant load hashes
I am trying to crack a md5 hash using a word list with john the ripper i used the following command:
john --format=raw-md5 --wordlist=/usr/share/wordlists/rockyou.txt.gz /root/md5.txt
And i always ...
- 1
1
vote
1
answer
351
views
JohnTheRipper Advanced Mask
I have problem to construct advanced mask to crack hash of 7zip file.
The password have 16 chars where are all lower, upper, decimal and !@#$%-_=+:
Main information is that any char can't duplicate ...
- 113
-3
votes
1
answer
3k
views
How to use hashcat to crack a password made with openssl-passwd? [closed]
I want use hashcat or John the Ripper to crack the hash of a password.
I know the password was created using the following command:
openssl passwd -crypt -salt tl ********
The asterisks, of course, ...
- 3
1
vote
0
answers
81
views
Trying to customize john rules, require at least one symbol in passwords
I"m trying to crack passwords that contains at least one symbol, e.g
qwe@123
I'm reading through the cheat sheet here, didn't find anything relevant, does anyone know?
- 2,057
0
votes
1
answer
168
views
John stdout to Hydra
I'm trying to use a John ruleset which seems to take up more space than I have available. Is there a way to pipe John into Hydra?
- 101
1
vote
0
answers
233
views
Using John the Ripper with custom encryption function
I have a working script done with python to do dictionary attack on a few hashes
import hashlib
def main():
print("Starting...")
users = []
with open('users.txt') as f:
for line ...
- 111
0
votes
1
answer
818
views
XVWA PBKDF2 with sha256 and 1000 iteration
In XVWA (Xtreme Vulnerable Web Application) I presented with an PBKDF2 with sha256 and 1000 iteration as such:
<?php
function create_hash($password)
{
// format: algorithm:iterations:salt:...
- 1,840
0
votes
1
answer
449
views
How to make John the Ripper output example hashes for a given hash type?
Is it possible to make John the Ripper output example hashes for a given hash type given by the --format= option?
This is possible using Hashcat, but currently I look in John the Ripper's source code ...
- 1,207
0
votes
1
answer
380
views
Generating passwords with rule: the contents within a 10 characters string must maintain a certain ratio of numbers and letters in no particular order
I'm playing around with Kali and am looking to crack my WPA2 default password.
I started generating 10 character passwords with a charset of solely digits and upper alpha lastnight and after 10 mins, ...
- 3
0
votes
1
answer
888
views
Benchmark Password Cracking Tools
I want to perform a benchmark for the most popular offline password cracking tools (john the ripper and hashcat)?
What metrics or approach should i take about benchmarking in order to determine what ...
0
votes
1
answer
624
views
Use john to crack passwords with X alphanums and Y symbols
I'd like to use john to crack passwords that has 3 chars and 1 symbol in it, e.g 123$
If I use mask mode I will have to specify it 3 times,
-mask='[a-z0-9]?s[a-z0-9][a-z0-9]'
-mask='[a-z0-9][a-z0-9]?...
- 2,057
1
vote
1
answer
740
views
John the Ripper known part of password [closed]
For migration purposes i need to get the plaintext password for all our accounts, stored in the shadow file.
Our system uses usernames in the format "firstname.lastname" and password is either "...
- 113
-1
votes
1
answer
4k
views
John the ripper 0 password hashes cracked, 38 left
Kali linux latest build trying to use John the Ripper
I have the hashes in a file called userhash.txt
So I try this: (just starting to see if it works)
john --wordlist=word.lst userhash.txt
Using ...
- 1
0
votes
0
answers
115
views
Breaking a tough password using john
I'm trying to crack a pretty advanced password on my computer and I've had it running for about a day on john's default settings.
Its gotten through roughly (a day times 23000kp/s) passwords.
I have ...
- 101
0
votes
0
answers
10k
views
How do I combine a salt and hash for John The Ripper? [duplicate]
I found a password hash
*61A2BD98DAD2A09749B6FC77A9578609D32518DD
I found a salt somewhere else.
How do I combine these to feed into John the Ripper?
When I run John on the hash (minus the *) John ...
- 101
1
vote
1
answer
1k
views
How to tell JohnTheRipper to solve a password using multiple hashes?
I have 6 archive files in 7zip format. They have the same password. I use the perl script 7z2john to generate a hash for each of the archives.
I try to combine the hashes into a hashes file, then ...
- 111
3
votes
2
answers
3k
views
John the Riper couldn't crack all the passwoords
I have a password file with 7 passwords, but JTR only could crack 4 and 3 that couldn't.
What it's the reason?
C:\tmp\john179j5\run>john --show shadow.txt
root:password:12923:0:99999:7:::
student1:...
- 51
2
votes
0
answers
2k
views
Brute force hex password with exactly two special characters using JohnTheRipper
I want to optimize the way I'm using John the Ripper. I have a password with a know length (9) that consists only of (lower-case) hex characters and exactly two special characters.
First I tried ...
- 121
6
votes
3
answers
29k
views
Is it possible to crack any SHA1 hashed password
I'm trying to understand how easy it is to crack a SHA1 hashed password. I have a training database giving hundreds of password hashed.
I have tried to use some online tools to crack them and I have ...
- 433
1
vote
2
answers
6k
views
How to crack forgotton KeePass password when knowing most of the password
A few days ago I changed my KeePass password and forgot it unfortunately. It isn't that much different from the previous one, but I kept trying and trying and it says it's incorrect
I found https://...
- 11
1
vote
0
answers
114
views
John the Ripper modify passwords before checking
Assume I have a password I want to crack in the following format:
100 times the character 'a' prepended to
Some word found in a wordlist
John will probably not be able to crack this with the default ...
- 159